Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/acuDY4qwoNpOMAjZBEGYBbEYMZM.roa
File: acuDY4qwoNpOMAjZBEGYBbEYMZM.roa (raw, json)
Hash identifier: G5PS8ZPKDVTqq12wYAugP1sNMdrSAY+kyccm067T6gA=
Subject key identifier: 69:CB:83:63:8A:B0:A0:DA:4E:30:08:D9:04:41:98:05:B1:18:31:93
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019EB18EE3CEF70E89ABC40E2A9FA14172F9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/acuDY4qwoNpOMAjZBEGYBbEYMZM.roa
Signing time: Wed 10 Jun 2026 12:43:12 +0000
ROA not before: Wed 10 Jun 2026 12:43:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204785
IP address blocks: 89.144.61.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:8e:e3:ce:f7:0e:89:ab:c4:0e:2a:9f:a1:41:72:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 10 12:43:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69cb83638ab0a0da4e3008d904419805b1183193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:25:d1:4a:13:9a:26:ed:f4:e6:fb:d1:22:a2:
60:bf:65:c6:4c:4c:b4:81:4f:a9:20:5f:0e:05:a7:
52:83:a6:dc:b3:39:dd:ba:ec:2d:92:64:e4:77:84:
d5:34:18:03:77:82:4c:1d:f1:0b:fa:b4:00:06:67:
2b:ab:9d:ab:a8:df:3a:49:0a:bb:c4:b2:80:9e:0d:
ea:58:96:48:7d:ac:6d:4a:a0:8e:64:57:cd:ec:2b:
90:4a:ba:db:13:16:b7:4a:eb:b3:a9:30:c9:10:d6:
a0:76:df:7c:ad:6c:80:29:f2:4e:59:a1:92:54:06:
3e:0f:85:13:5d:58:61:fd:3e:eb:31:3f:2e:aa:c8:
77:13:35:be:69:4f:a7:17:a6:23:d1:48:8d:7f:d7:
07:b6:b3:20:e7:9d:da:ce:d5:13:f2:3d:c3:0a:7b:
94:a4:1f:73:67:16:cb:bb:2b:a6:0f:30:ee:c1:02:
23:7d:23:af:d7:92:a0:d4:47:3a:13:b7:9c:a6:2c:
51:75:04:74:5a:31:28:b8:3c:a9:2e:09:ac:5f:c8:
42:71:cd:c7:87:9e:bd:68:45:5a:48:b7:8e:5a:39:
43:9e:e3:d0:48:3c:10:7d:25:40:00:02:52:d1:ab:
dd:97:20:5f:39:62:e3:22:5f:ca:5d:b7:f6:9c:70:
a6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CB:83:63:8A:B0:A0:DA:4E:30:08:D9:04:41:98:05:B1:18:31:93
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/acuDY4qwoNpOMAjZBEGYBbEYMZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.61.0/24
94.249.148.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e4:9e:3d:35:cc:cf:0a:ec:0d:00:ab:48:8e:7c:9e:c2:8d:
09:5f:23:6d:8a:a7:ff:b9:6d:69:e1:d4:d7:7a:eb:2d:38:93:
57:49:fc:f9:bb:50:9e:f9:82:ff:bb:ef:58:cb:f6:9e:c5:65:
28:f2:ae:c9:b9:41:de:71:c5:f5:39:4f:79:1b:e1:38:cc:c3:
27:74:03:a0:20:cd:58:13:c1:f6:61:a8:52:47:4d:ee:bb:30:
53:92:ab:35:0b:e5:f9:0e:ca:b7:88:bf:a6:9a:76:21:2c:b4:
52:df:0a:ba:da:cd:95:33:0f:ba:b6:a4:dc:3a:e6:f5:06:82:
b5:55:f6:27:48:da:13:e5:80:43:e5:e4:64:0d:6c:fd:61:62:
4a:78:26:64:32:1b:db:b0:87:7a:66:6d:6f:22:89:fe:6b:18:
36:75:04:f2:07:7c:e4:54:52:e2:2a:8b:05:f2:bb:30:68:54:
d3:c9:be:aa:ab:fb:eb:93:32:45:1e:39:9f:59:60:b9:58:9a:
ae:f9:cf:f0:35:43:fc:fd:1c:c5:35:9c:fe:7d:9d:70:31:27:
3f:22:e8:d3:c3:2f:6e:46:22:8a:58:4d:6e:76:8a:a0:21:5b:
c9:d0:8f:13:65:b6:14:47:f8:43:32:30:e4:22:0d:9a:be:e3:
23:f3:92:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:50:09 2026 by rpki-client